Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > february 2006 > threads for february 15 - 21, 2006

Filter by week: 1 2 3 4

Programmatic Forms Authentication
Posted by Tyler Carver at 2/21/2006 12:11:29 PM
I'm looking for a provider or some type of programmatic access to beable to map which URL's in my website need authentication. Using the web.config does not give me a real time way to say which URL's are authorized. Many of the URL's in our website are dynamic and allow dynamic authorization...more >>


Custom RoleProvider + <allow roles> not working
Posted by SJ at 2/21/2006 10:43:04 AM
I am trying to use a custom role provider (along with custom membership/profile providers) to secure some sections of our website.For testing purposes I have implemented a very basic role provider as shown in the code below. In the website I have test.aspx under secure folder and I use <locatio...more >>

DP API Security queries
Posted by Sachin Chavan at 2/21/2006 12:48:32 AM
Hi, In my application, I am using a .net wrapper class (a dll) which internally calls the Win32 DP API for encryption and decryption. Now, my client has following queries: 1. Since the encryption Key is managed by Windows internally what is the security of the Key used for encryption? ...more >>

Simple website with open and restricted area
Posted by Magnus Blomberg at 2/20/2006 7:30:40 PM
Hi! I am trying to write a simple public web application (internet) where the root is public (anonymous) and where I have a subfolder called admin where a few aspx-pages should be restricted to one user. In dotnet 1.1 (or was it 2.0 beta) I had this funcionality using Authentication mode se...more >>

Sarting New Process from aspx page
Posted by Wally at 2/20/2006 5:48:06 AM
I know this is an asp.net question but I've had no answers there. How do you start a new visible process from a asp.net page? I can use: System.Diagnostics.Process.Start ("mspaint.exe"); from Main() in console application and it works fine. When I put it in the Page_Load procedure of ...more >>

Design Issue (Employee and Client)
Posted by fingermark NO[at]SPAM gmail.com at 2/19/2006 9:02:07 PM
I am trying to design a login system, but I am running in to a couple of design issues. All tips are welcome. There are two principals that need to access the system: employees and clients. Clients login at clients.example.com. Employees login at employees.example.com. First design issu...more >>

forms authentication redirect problem.
Posted by Donkey at 2/19/2006 6:38:54 AM
Hi i've made a loginpage and a protected one. If the user tries to enter the protected page he gets redirected to the loginpage and at this point everything works fine. But when the user goes directly to the loginpage and types his pasword it fails to login. it tried to solve this with foll...more >>

wse vs "windows integrated"
Posted by yonido NO[at]SPAM gmail.com at 2/19/2006 4:56:29 AM
hello, i would like to implement a secure web service based on the active directory, without using HTTPS / SSL, using the Kerberos mechanism. As documentation mentions - Checking "Windows Integrated" & attaching CredentialCache.DefaultCredentails to the web service will suffice (will use th...more >>



System.Security.SecurityPermission error trapping
Posted by Michael at 2/18/2006 3:00:05 PM
Re: system.security.securityexception [CAS error message] The program I have written [works just fine in the My Computer Zone] requires "Full Trust" to run and will throw a security exception if a user tries to load it while working in the Intranet Zone, i.e., on a LAN. I am tryin...more >>

Listing domain users
Posted by Felix_WafyTech at 2/18/2006 12:00:00 AM
Hello, I'm using windows authentication to authenticate users to my site. I now want to 1. Add the ability of listing domain users (From Active Directory) 2. Filter the user list based on the roles (or groups) assigned to them (via Active Directory). Any help would be greatly appreciated...more >>

Persistent Cookie not working
Posted by jrhea2006 NO[at]SPAM kellogg.northwestern.edu at 2/17/2006 4:01:42 PM
I want my site to remember users when they come back without requiring them to login again (assuming they checked "remember me" on the login control). I've tried increasing the timeouts to 3000000+ but it still requires users to login if the session times out (roughly 30 minutes or so). Wha...more >>

aspnet_setreg with other data
Posted by chandy NO[at]SPAM totalise.co.uk at 2/17/2006 7:56:30 AM
I can use aspnet_setreg to securely store the credentials to be used by the ASPNET identity, but can the same technique be used to store data for other custom config keys? i.e., does ASP.Net understand what to do if I have this in the web.config? <appSettings> <add key="myUser" value...more >>

Application Pools, Domain User Accounts and Service Principal Names
Posted by Tom McDonnell at 2/17/2006 12:00:00 AM
I've been involved in building an application in ASP.NET which has utilised application pools in IIS6 to allow the site to run under the credentials of a domain user and authenticate with SQL Server. Having recently rolled this application out to a number of sites, we have encountered a pro...more >>

Membership Provider for MS Access
Posted by micheledicosmo NO[at]SPAM gmail.com at 2/16/2006 6:13:56 PM
Hi, I am trying to make my own website which is using an SQL Express MDF db for membership with the default SQL Membership Provider running on a cheap server which does not offer the SQL server, but only Access (MDB) connection. I have found an example by Microsoft (SampleAccessProviders.vs...more >>

How can I impersonate a user in code?
Posted by Friso Wiskerke at 2/15/2006 12:00:00 AM
Hi all, I'm trying to save an uploaded file to a share on another computer in the domain. If I use the <identity impersonate ..... /> tag in the web.config and enter the credentials of a domain user which has sufficient rights on that share it works fine. However I don't need (and want) ...more >>


DevelopmentNow Blog